London Metropolitan University Business Continuity Management Seminar Friday June 27 th 2008 The Henry Thomas Room LUNCH

Business Continuity Management Seminar Friday 27 th June 2008 u Introduction to London Metropolitan University Business Continuity Plan (John Friary) u The New Standard for Business Continuity Management – BS25999 (John Sharp FBCI(Hons) FCMI MCIM) u The Next Steps – Review,Departmental Plans and Desk Top Exercise(John Friary)

Business Continuity u Major Incident Planning u Disaster Planning u Emergency Planning u Disaster Recovery and Business Continuity Planning

City University Fire May 2001

STUDENTS UNION END OF TERM PARTY FLYER !

THE NEXT MORNING GABLE WALL

LATER THAT DAY – GABLE WALL COLLAPSED

Southampton University Fire October 2005

Westminster University Fire July 2007

Delft University Fire May 2008

London Metropolitan University Arcade Hall of Residence Fire 2004

London Metropolitan University Commercial Road Fire 25 th June 2008 – Scaffolding ablaze

London Metropolitan University Commercial Road Fire 25 th June 2008 – Fire Fighters put out fire

London Metropolitan University Commercial Road Fire 25 th June Fire Fighters put out fire

London Metropolitan University Commercial Road Fire 25 th June 2008 – 4 Fire Engines, Police and ambulance arrive on scene

London Metropolitan University Commercial Road Fire 25 th June 2008 – Fire put out

London Metropolitan University Commercial Road Fire 25 th June 2008 – Fire Investigations Team arrive

London Metropolitan University Commercial Road Fire 25 th June 2008 – Building closed!

Why Plan? Unacceptable

Why Plan? Objective

Expecting the Unexpected Business Continuity in an uncertain world (BCI/ACPO/London First 2003) Business Continuity in an uncertain world (BCI/ACPO/London First 2003) Key Steps in developing business continuity management : u Analyse your business u Assess the risks u Develop your strategy u Develop your plan u Rehearse your plan

Business Continuity London Metropolitan University is a member of the HIGHER EDUCATION BUSINESS CONTINUITY NETWORK (HEBCoN) : - Attended first National Conference in University of Birmingham April Attended National meeting on Pandemic Influenza May Attends HEBCoN London Regional Group meetings

London Metropolitan University Estates Emergency Response Plan and Business Continuity Plan Management framework for responding to a major incident

Estates Emergency Response Plan The Emergency Response Plan is a management tool to aid the Estates Department in the overall management of the University’s first response to an emergency that impacts on the operational use of its buildings. All other business continuity matters are subordinate to the Emergency Response Team (ERT) until the initial emergency period has passed. The plan focuses on the emergency response to incidents that occur during normal and out of normal working hours of the University. Normal hours are defined as 09:00 – 17:00hrs Monday to Friday. Out of ours defined as 17:00 – 09:00hrs 7 days a week including national holidays.

Business Continuity Plan The Business Continuity Plan establishes an Emergency Committee(ECOM) that manages response strategies and allocates resources to ensure a major incident has minimal impact on the University's business operation. The emergency responses are guided by London Metropolitan University's overriding emergency goals of:  Protecting life  Securing the critical infrastructure and facilities  Resuming the teaching and research program

Scope of the plan The plan will be involved when: u Access to any University building is denied due to any incident u The University’s business systems are interrupted u A Health & Safety incident affects staff, students and/or local community/environment

Stages of Activation Bronze - No immediate threat to safety and/or property but emergency situation has an impact on the operation of the building(s) that may eventually lead to closure or limited occupancy/operation of building. This will be activated by a level 1 response (see below).

Stages of Activation Level 1 - Business interruption affecting one or more departments and/or function an example of such an incident could be localised flooding or temporary loss of building services. Members of the EMT will be placed on alert by the ERT in preparedness should the incident escalate. Level 1 - Business interruption affecting one or more departments and/or function an example of such an incident could be localised flooding or temporary loss of building services. Members of the EMT will be placed on alert by the ERT in preparedness should the incident escalate.

Stages of Activation Silver - Threat to safety and/or property identified but not immediate. Has a severe impact on the operation of the building(s) that could result in closure of the building. Staff to evacuate when ordered to do so by ERT or police/authorities. This will be activated by a level 2 response (see below). Silver - Threat to safety and/or property identified but not immediate. Has a severe impact on the operation of the building(s) that could result in closure of the building. Staff to evacuate when ordered to do so by ERT or police/authorities. This will be activated by a level 2 response (see below).

Stages of Activation Level 2 - Business interruption affecting one or more buildings resulting in short term closure of the building e.g. up to and including two working days and will be overcome by the relevant department(s) implementing their own departmental emergency response plan supported by the Estates Team. An example of such an incident could be total loss of building services to one or more buildings. Members of the ECOM will be notified.

Stages of Activation Gold - Immediate threat to safety and/or property requiring controlled evacuation and closure of the building(s) ordered either by the ERT or the police/authorities. Immediate activation of the business continuity plan and notification of members of the EMT and resources to be mobilised. This will be activated by a level 3 response (see below) Gold - Immediate threat to safety and/or property requiring controlled evacuation and closure of the building(s) ordered either by the ERT or the police/authorities. Immediate activation of the business continuity plan and notification of members of the EMT and resources to be mobilised. This will be activated by a level 3 response (see below)

Stages of Activation Level 3 - Business interruption affecting the operation of the University. An incident of this nature will invoke immediate activation of the University Business Continuity Plan. An example of such an incident could be a terrorist attack on infrastructure of the University or surrounding buildings, gas leak, major fire or other infrastructure problems. Members of the ECOM will be notified. Level 3 - Business interruption affecting the operation of the University. An incident of this nature will invoke immediate activation of the University Business Continuity Plan. An example of such an incident could be a terrorist attack on infrastructure of the University or surrounding buildings, gas leak, major fire or other infrastructure problems. Members of the ECOM will be notified.

Key Responsibilities u Life Preservation u Media u Learning resources; Library, Media, student IT facilities u Teaching u Operations u Recovery

Business Continuity Management Seminar Friday June 27 th 2008 … and now over to John!

Departmental Plans and Risk assessments u Some Departmental Plans very detailed: Systems and Services IT and Libraries (M25) u For most Departments best approach is based on Risk Assessment, ie - Critical activities - Critical locations - Critical dates and times

Departmental Emergency Plans Department: Critical function: Effect on the Department: Effect on the University: Recovery timescale: Contact Information: Special Instructions:

QUESTIONS John Friary, Health & Safety Adviser Steve Taylor, Head of Facilities Helen Kruczkowska, Insurance Manager John Sharpe, Kiln House Associated Ltd.

The Next Steps 1. Departmental Business Continuity Plans (Risk Assessments) to be completed by End of July Departmental Business Continuity Plans (Risk Assessments) to be completed by End of July Desk Top Exercise with Emergency Management Team (EMR) and Emergency Response Team (ERT) September Review of Estates Emergency Response Plan and Business Continuity Plan in 2009 with Desk Top Exercises (Talk Through and Walk Through)